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IN THE CLAIMS 
Please cancel claims 1-3 without prejudice or disclaimer. 
Please amend claims 4 and 5 as indicated below. 

This listing of claims will replace all prior versions, and listings, of the claims 
in the Application. 

Listing of Claims: 

Claims 1-3 (cancelled) 

Claim 4 (currently amended) The method of claim 3, A method for rapid intrusion 
detection for network communication comprising the steps of: 

receiving packets of network data in a network processor coupled to a network 

fabric; 

forwarding routed network data to the network fabric: 

coupling selected data from the network data to a parallel pattern detection 
engine (PPDE). for comparing the selected data in parallel to M sequences of pattern 
data stored in the PPDE and generating a match output signal when at least one of the 
M sequences of pattern data compares to a portion of the selected data; 

storing N intrusion signatures in the M PUs sequences of pattern data with 
corresponding identification (ID) data used to identify which of the N intrusion 
signatures is detected; 

storing action code indicating action to take in response to detecting a 
particular one of the N intrusion signatures; 

analyzing the packets of network data for validity thereby generating valid 
packets of network data as the selected data; 

comparing the selected data to the store N intrusion signatures and generating, 
at network data speed, a pattern compare signal and particular ID data when a 
particular one of the N intrusion signatures is detected; and 

executing the action code corresponding to the particular one of the N 
intrusion signatures detected; 
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wherein the PPDE comprises: 

an input/output (I/O) interface for coupling data into and out of the 

PPDE; 

M processing units (PUs), each of the M PUs having compare circuitry 
for comparing each of the sequence of input data to pattern data stored in each of the 
M PUs and generating a compare output, wherein an address pointer selecting the 
pattern data in each of the M PUs is modified in response to a logic state of the 
compare output and an operation code stored with the pattern data; 

an input bus for coupling the sequence of input data to each of the M 
PUs in parallel; 

an output bus coupled to the I/O interface for sending output data to 
the I/O interface; 

control circuitry coupled to the I/O interface and coupling control data 
on a control data bus and identification (ID) on an ID bus to each of the M processing 
units; and 

ID selection circuitry for selecting a match ID from ID data identifying 
the M PUs in response to a pattern match signal and match mode data, wherein the 
match ID and match data corresponding to the match ID are saved in a temporary 
register as the output data. 

Claim 5 (currently amended) The method of claim [[3]] 4, wherein the PPDE further 
comprises cascade circuitry coupled from each of the M PUs to one or more adjacent 
PUs within the M PUs for selectively coupling chain data between one or more 
groups of two or more adjacent PUs selected from the M PUs in response to the 
control data. 

Claims 6-21 (cancelled) 
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